Merge pull request #180412 from fabaff/grype-bump

grype: 0.40.1 -> 0.41.0, syft: 0.49.0 -> 0.50.0

authored by

Fabian Affolter and committed by
GitHub
ed287683 b3e5f65d

+6 -6
+3 -3
pkgs/tools/admin/syft/default.nix
··· 2 3 buildGoModule rec { 4 pname = "syft"; 5 - version = "0.49.0"; 6 7 src = fetchFromGitHub { 8 owner = "anchore"; 9 repo = pname; 10 rev = "v${version}"; 11 - sha256 = "sha256-VsiQa3W/5eG5/U4sGRvYPa0MDYrayXIJtbutPnH/vUI="; 12 # populate values that require us to use git. By doing this in postFetch we 13 # can delete .git afterwards and maintain better reproducibility of the src. 14 leaveDotGit = true; ··· 20 find "$out" -name .git -print0 | xargs -0 rm -rf 21 ''; 22 }; 23 - vendorSha256 = "sha256-NENKogPlp6upMkRULnkkqMep9U7cI+CR+6TDF38T2vk="; 24 25 nativeBuildInputs = [ installShellFiles ]; 26
··· 2 3 buildGoModule rec { 4 pname = "syft"; 5 + version = "0.50.0"; 6 7 src = fetchFromGitHub { 8 owner = "anchore"; 9 repo = pname; 10 rev = "v${version}"; 11 + sha256 = "sha256-FQHmlASGBJOCAde0k3yuQBj8ZGsmi2jPWbq26NgXOxU="; 12 # populate values that require us to use git. By doing this in postFetch we 13 # can delete .git afterwards and maintain better reproducibility of the src. 14 leaveDotGit = true; ··· 20 find "$out" -name .git -print0 | xargs -0 rm -rf 21 ''; 22 }; 23 + vendorSha256 = "sha256-lnI2Y6GcxR+LiR8Us4j+8GbSYyXwvpiWqacWneGrMAE="; 24 25 nativeBuildInputs = [ installShellFiles ]; 26
+3 -3
pkgs/tools/security/grype/default.nix
··· 7 8 buildGoModule rec { 9 pname = "grype"; 10 - version = "0.40.1"; 11 12 src = fetchFromGitHub { 13 owner = "anchore"; 14 repo = pname; 15 rev = "v${version}"; 16 - hash = "sha256-op0oNtHljAjEmWCjvWHk/jGf8De6IdX7Y0dfPl7dkN0="; 17 # populate values that require us to use git. By doing this in postFetch we 18 # can delete .git afterwards and maintain better reproducibility of the src. 19 leaveDotGit = true; ··· 26 ''; 27 }; 28 29 - vendorSha256 = "sha256-5huViLIs6SZoO0cAIf2sI20qlQUsFi+Rv68PvfbVgBw="; 30 31 nativeBuildInputs = [ 32 installShellFiles
··· 7 8 buildGoModule rec { 9 pname = "grype"; 10 + version = "0.41.0"; 11 12 src = fetchFromGitHub { 13 owner = "anchore"; 14 repo = pname; 15 rev = "v${version}"; 16 + hash = "sha256-hEWs1o4Y3fm6dbkpClKxvR4qt5egE6Yt70V9sd3GK3I="; 17 # populate values that require us to use git. By doing this in postFetch we 18 # can delete .git afterwards and maintain better reproducibility of the src. 19 leaveDotGit = true; ··· 26 ''; 27 }; 28 29 + vendorSha256 = "sha256-BB7E6wb6A97AATxFHENLo+Q+oVYOnYRzC/15bfomgR4="; 30 31 nativeBuildInputs = [ 32 installShellFiles